CVE-2026-34005High 8.8In Sofia on Xiongmai DVR/NVR (AHB7008T-MH-V2 and NBD7024H-P) 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticated DVRIP protocol (T1.6%
CVE-2024-3765Critical 9.8Xiongmai AHB7804R-MH-V2 Sofia Service access control1.3%
CVE-2024-3765Critical 9.8Xiongmai AHB7804R-MH-V2 Sofia Service access control1.3%
CVE-2024-3765Critical 9.8Xiongmai AHB7804R-MH-V2 Sofia Service access control1.3%
CVE-2024-3765Critical 9.8Xiongmai AHB7804R-MH-V2 Sofia Service access control1.3%
CVE-2024-3765Critical 9.8Xiongmai AHB7804R-MH-V2 Sofia Service access control1.3%
CVE-2024-3765Critical 9.8Xiongmai AHB7804R-MH-V2 Sofia Service access control1.3%
CVE-2024-3765Critical 9.8Xiongmai AHB7804R-MH-V2 Sofia Service access control1.3%